Maileroo, a global email delivery provider helping businesses scale their email infrastructure. We provide enterprise-grade email infrastructure with data-residency options in Singapore. Learn why people are making the switch to Maileroo as their choice for a sending partner.
Who it's forYou run several markets from Singapore and send account, billing and product email to customers across the region.
You need: one platform with a separate sending domain and reputation for each market or brand, and data held in Singapore.
You're regulated by MAS, including under the Payment Services Act, and send one-time passcodes, transaction alerts and eStatements.
You need: evidence for your technology risk and outsourcing reviews, templates that follow MAS anti-phishing practice, and dependable uptime.
Your volumes are small, but every email is sensitive: client reports, capital call notices, KYC requests.
You need: enforced TLS, strict access controls and a sending setup no other company's email can affect.
You send order confirmations every day and very large campaigns on 9.9, 11.11 and 12.12.
You need: capacity for sale-day spikes and Spam Control Act-compliant marketing email.
You send shipment updates, invoices and trade documents, often as attachments, and receive documents back by email.
You need: reliable delivery of large attachments, inbound email routing and webhooks into your operations systems.
Your customers' vendor risk questionnaires ask where email data is stored and who can access it.
You need: clear, written answers and a data handling summary you can attach.
PDPAUnder Singapore's Personal Data Protection Act 2012 (PDPA), Maileroo acts as your data intermediary: we process personal data on your behalf and under your instructions. You remain responsible for consent and purpose; we're directly responsible for protecting and retaining data properly, and for telling you quickly if something goes wrong.
Default Maileroo systems are set up in the EU. Enterprise customers on our Singapore region store email content, attachments, delivery logs and suppression lists in Singapore. Billing and support tools are listed in our DPA and operate overseas.
| PDPA obligation | What it means for your email | What Maileroo gives you |
|---|---|---|
| Consent and Purpose Limitation | Email recipients agreed to receive these messages, for this purpose | Separate streams for transactional and marketing email; inbuilt unsubscribe mechanic with automatic suppression |
| Protection | Reasonable security for email content, addresses and logs | TLS in transit, encryption at rest, role-based access, SAML SSO, audit logs |
| Retention Limitation | Don't keep email data longer than you need it | 14 days for content and logs, then deleted; deletion on request |
| Transfer Limitation | Data sent outside Singapore needs comparable protection | Storage in Singapore, plus contractual safeguards for any overseas access (see below) |
| Data Breach Notification | Assess a suspected breach and notify PDPC within 3 calendar days if it's notifiable | We tell you without undue delay, and within 72 hours, with the facts you need for your assessment |
| Accountability | Your DPO can show how vendors handle data | A data handling summary, DPA and sub-processor list ready for your records |
Your email data is stored in Singapore. Maileroo's engineering and support teams are based in Melbourne, Australia. They access Singapore data only to investigate an incident or a support request you raise, and that access is limited to named staff.
Under PDPA, this access counts as a transfer out of Singapore. Our Data Processing Addendum binds us to protect the data to a standard comparable with PDPA, which is what the Transfer Limitation Obligation requires.
MAS-regulated firmsBanks, insurers and payment institutions assess email providers under MAS's Technology Risk Management (TRM) Guidelines and its outsourcing requirements. These are the questions those reviews usually ask, with our answers.
| Your review asks | Maileroo's answer |
|---|---|
| Where is customer data stored and processed? | In Singapore. Overseas access is limited to named Melbourne staff, for incidents and support you request |
| Can MAS and your auditors examine the service? | Our DPA includes audit and information rights for you. We support your MAS and auditor reviews with the evidence pack below. |
| How quickly will you tell us about an incident? | Within 72 hours. MAS expects you to report relevant incidents within 1 hour, so we keep our notification time short |
| What uptime do you commit to? | 99.9% a month, with service credits under our SLA |
| Who are your sub-processors? | Listed in our DPA, with each one's location. Singapore-specific details are available on request |
| How do we exit? | Your data means your control. You can export your logs, suppression lists and if you wish for your data to be deleted, we can do that upon verification of your request. |
Since 2022, banks in Singapore have stopped putting clickable links in emails and text messages to retail customers. Maileroo supports templates with no links at all, so you can follow that practice without rewritten tracking URLs.
We also help you reach DMARC enforcement, which stops criminals sending email from your domain and lets you show your logo in supporting inboxes through BIMI.
Under the Shared Responsibility Framework, in force since 16 December 2024, financial institutions must send real-time notifications of outgoing transactions. Maileroo gives alerts their own priority stream, sends them from Singapore, and records the delivery time of every message through webhooks, so you can show when each alert was sent.
Enterprise capabilitiesSend, test, define routing and security policies for how your email environments operate, all under one account.
Send email through SMTP relay or the Email API with flexible options that fit the way your stack already works.
Protect your sender reputation with dedicated IP addresses built for consistent, high-volume enterprise delivery.
Keep transactional and marketing traffic in separate streams so one channel never puts the other at risk.
Connect every app and website you need on paid plans, with no hard limit on how many domains you can send from.
Give each domain its own logs, analytics, and credentials so teams and brands stay fully separated.
Attach multiple domains to one vendor or service, then set outbound security rules that match your workflow.
Review up to 30 days of sending data and dig into the metrics that show how every campaign is performing.
Search 14 days of email logs with advanced filters so you can find issues quickly and stay in control.
Resend failed, suppressed, or delayed messages from the dashboard for up to 14 days with a single click.
Automatically manage bad recipients, then import or export suppression lists whenever you need a closer look.
Measure opens and clicks across every send so you can see what engages people and improve the next campaign.
Use your own branded tracking domain on links to keep recipient trust high and your brand front and centre.
Set the return-path address that processes bounces and delivery updates so feedback loops stay accurate.
Watch your IPs and domains across major RBLs so reputation problems are spotted early, not after the damage.
Push delivery, bounce, and engagement events into your systems in real time so workflows can react instantly.
Route incoming email into your apps and workflows with inbound processing that fits how your team operates.
Build templates in the drag-and-drop editor, render them dynamically via API, and start from 200+ ready designs.
Import HTML from a file, zip, or URL, then adjust the design visually without writing or debugging any code.
Invite teammates and assign permissions with fine-grained control over what each person can view or change.
Configure passwordless SAML sign-in for your organization. Enables your organisation greater security and compliance.
Add two-factor authentication with popular authenticator apps to keep account access locked down and secure.
Track collaborator activity across your account so every important change is logged and easy to review.
Test sending and integrations on a free domain before launch, so production stays clean while you experiment.
Add and manage domains programmatically through the API so onboarding new sending domains stays automated.
Connect with official SDKs in major languages, or plug into tools like Zapier, Make, and WordPress in minutes.
Follow clear documentation with practical examples so your team can integrate quickly and with confidence.
Configure DNS on Cloudflare in one click, with setup that respects your existing records and avoids surprises.
Export delivery reports, suppressions, and more whenever you need the data outside the Maileroo dashboard.
Get help from people with real email experience, so your first contact already understands the problem space.
Need help in real-time? Our live chat is available for both general and technical support.
EvaluationGet backed by the team that understands your needs and has been helping businesses all over the world deliver millions of emails every day.
ReviewsWe're a small team, which means when you write in, you're talking to someone who works on the product. Startups, agencies, and growing businesses stay with Maileroo because the support is real, the pricing is honest, and the infrastructure holds up.
"I love it as an SMTP service for transactional emails. The app is fast, easy to understand and fully featured, but not overwhelming, and email delivery is super fast and reliable. Just perfect! Every time I needed to request a feature or inquire about something with the team, they responded quickly and satisfactorily, both in their Discord channel and via email."
"I have been a Maileroo customer for almost 2 years now and I am very satisfied: Sending emails is super fast and reliable. The support is great and fast (usually within 1 hour). The interface is functional yet easy to use. You pay much less at Maileroo than at other providers without compromising on quality. In short, a great company to work with as an agency!"
"Using Maileroo for half a year now. Api and its documentation is simple, straightforward and just works. What truly makes the difference is the fast, personal support. Support is always quick to respond and to find a solution. Requests or suggestions are taken seriously and often translated into practical improvements. That level of personal involvement and service is rare and makes Maileroo a solution I can confidently recommend. Experience with mailgun, mailjet, sendgrid, resend and Maileroo takes the cake."
Other regionsIf you also send from Australia, Maileroo can host that traffic onshore there. The same enterprise SMTP setup is available in other regions, each with its own data residency.
FAQYes. For enterprise customers on our Singapore region, email content, attachments, delivery logs and suppression lists are stored in our Singapore datacentre. Our DPA and sub-processor list shows anything processed elsewhere. Please note, default Maileroo systems are set up in the EU and the DPA outlines our global sub-processor list.
No. Maileroo is run by Maileroo Group Pty Ltd, an Australian company headquartered in Melbourne. We host infrastructure in Singapore for customers who need their email data there.
Only in limited cases. Named engineers in Melbourne can access Singapore data to resolve incidents or support requests you raise, every access is gated behind granular permissions, and our DPA covers it under PDPA's Transfer Limitation Obligation.
Within 72 hours of confirming it affects your data. That leaves you time to assess it and, if it's notifiable, report it to PDPC within 3 calendar days.
We provide the evidence MAS-regulated firms need for technology risk and outsourcing reviews: data location, sub-processors, incident notification, audit rights and exit support. Your own review decides whether we meet your requirements.
Maileroo can host enterprise SMTP in multiple regions, each with its own data residency, allowing you to switch out and send from the region you need with the data staying in the region you need. Talk to us about running multiple regions so your email stays in the region you need.
Yes. Maileroo supports UTF-8 throughout, including subject lines and sender names, and Email Testing lets you check rendering before you send.
Our team works 9am to 9pm Melbourne time. That's 6am to 6pm SGT from October to April, and 7am to 7pm SGT from April to October. Additional support hours are available on request.
Our SLA guarantees 99.9% uptime in every calendar month, or no more than 43 minutes and 12 seconds of downtime. Service credits apply on request if we fall short.
